EUVD-2026-58118

Form::Processor::Field::HtmlArea versions from 0.06 through 1.162360 for Perl allow attacker selected method dispatch and resource exhaustion via an HTML::Tidy diagnostic that validate passes to adderror as a Locale::Maketext template. validate runs HTML::Tidy over the submitted markup and passes...

CVE-2026-13051

CVE-2026-13051 affects Form::Processor::Field::HtmlArea (Perl) versions 0.06–1.162360. It allows attacker-chosen method dispatch and potential resource exhaustion when an HTML::Tidy diagnostic is passed to add_error as a Locale::Maketext template. Validate runs HTML::Tidy on submitted markup; mes...

CVE-2022-4993

HTML::FormHandler for Perl versions up to 0.40068 is affected. The flaw stems from using request-derived text as a Locale::Maketext template in _apply_actions and add_error, allowing attacker-controlled method dispatch and potential resource exhaustion. A crafted input can cause a chain of templa...

SUSE-SU-2026:22360-1 Security update for python-starlette

This update for python-starlette fixes the following issues - CVE-2026-48817: arbitrary HTTP method dispatched to HTTPEndpoint attributes via getattr bsc1268389. - CVE-2026-54282: request path that lacks a leading forward slash can lead to request.url.hostname manipulation bsc1268520. -...

OPENSUSE-SU-2026:21053-1 Security update for python-starlette

This update for python-starlette fixes the following issues - CVE-2026-48817: arbitrary HTTP method dispatched to HTTPEndpoint attributes via getattr bsc1268389. - CVE-2026-54282: request path that lacks a leading forward slash can lead to request.url.hostname manipulation bsc1268520. -...